$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa File: a46317f9-5181-35a7-ab20-00bacf68bf4e.roa (raw, json) Hash identifier: lJ8wTFTEUGj2EzcTW9+bjcOdOfIGRfVQPabLXrxaK7M= Subject key identifier: C3:DC:07:4E:20:F8:03:4E:C5:7D:80:6A:5E:78:48:21:39:BC:3E:79 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584B2CF6EC5294B398372F86AE80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 6391 IP address blocks: 2605:8c80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ec:52:94:b3:98:37:2f:86:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=42ef3299-806d-453c-8e9d-9963a0d934bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:da:2b:53:db:97:1b:02:51:d3:31:8d:35:89: c7:f3:8a:bd:18:79:93:e6:c4:43:52:7d:5f:a3:ff: ab:8a:e8:d6:0f:5c:de:bb:fe:39:8f:6f:6a:81:32: f9:b2:19:dc:07:9b:07:99:ce:b1:fd:e9:48:93:b7: d8:46:ee:6b:c4:7b:aa:d0:69:f5:ac:ea:cd:90:c2: 26:19:ea:d3:96:92:f1:1d:74:ef:6a:cc:16:63:02: e9:02:b5:48:62:dc:fa:c6:fc:8b:61:39:1f:dd:cf: 5f:a2:cf:48:14:4f:6a:1c:87:f9:df:39:95:f0:0e: c8:0d:e4:10:b7:15:b0:c0:1e:49:de:de:9d:05:72: b6:84:ac:1a:50:1d:1b:9d:3f:ca:be:7a:0c:ea:06: d4:05:a7:e4:dc:5a:c4:01:16:83:d1:32:1f:2d:e2: 9f:d5:08:30:aa:d0:14:2a:ac:81:a0:b7:2d:36:d7: 54:95:2a:7a:9d:8d:02:95:79:c9:9d:bc:e1:c7:8a: b2:bd:24:1b:9f:fa:22:e0:84:37:0d:50:8e:23:52: 5f:39:7a:f3:74:84:52:84:ed:bb:ef:51:2a:61:37: f1:97:b0:40:b3:f7:6c:e1:8f:a0:e1:12:ef:b0:42: 1c:fd:0e:a2:67:47:70:95:49:8e:79:2e:e7:29:99: 34:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DC:07:4E:20:F8:03:4E:C5:7D:80:6A:5E:78:48:21:39:BC:3E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv6: 2605:8c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:05:cb:f4:c9:13:5e:48:6f:08:12:15:2a:c4:92:51:48:f7: 23:97:0c:ec:05:ab:5b:21:d5:61:2b:4c:5c:49:89:68:28:de: 50:83:62:fd:1b:ac:60:39:8e:be:10:97:c8:25:a4:8b:eb:87: 20:d3:bc:aa:4a:ce:20:44:a3:23:d8:d2:69:9c:ec:0a:5c:a7: 65:2e:cd:06:66:da:ae:5c:52:cc:b3:f9:6c:45:9a:97:0e:33: 7e:a7:72:65:36:9d:9e:a1:6d:75:b5:8b:65:d0:70:f0:50:5d: b1:e9:45:48:f2:61:c4:7d:5b:5b:d7:a8:00:79:2e:90:ef:f4: c5:8d:b8:bd:67:1a:6e:46:ca:8c:2e:e9:f9:31:62:2d:24:7d: ca:44:ed:d1:ea:82:27:2d:d6:c1:05:94:a4:0e:47:24:11:be: 80:92:e8:75:83:ed:68:e6:44:ed:25:73:ef:51:ac:9d:23:48: 50:f6:2a:21:75:dc:66:a6:e8:d7:c4:07:31:a7:31:21:d1:4f: 5e:d0:c3:bc:88:33:c5:9e:c3:d2:fa:4a:62:06:68:da:bd:c5: 57:de:3b:54:99:95:25:59:64:67:53:05:fb:07:87:a7:b3:d3: aa:4d:5e:21:eb:32:9c:0b:34:f1:a1:9d:c3:bd:fa:85:53:10: 7d:81:53:5c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEss9uxSlLOYNy+GroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NDJlZjMyOTktODA2ZC00NTNjLThlOWQtOTk2M2EwZDkzNGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29orU9uXGwJR0zGNNYnH84q9GHmT5sRDUn1f o/+riujWD1zeu/45j29qgTL5shncB5sHmc6x/elIk7fYRu5rxHuq0Gn1rOrNkMIm GerTlpLxHXTvaswWYwLpArVIYtz6xvyLYTkf3c9fos9IFE9qHIf53zmV8A7IDeQQ txWwwB5J3t6dBXK2hKwaUB0bnT/KvnoM6gbUBafk3FrEARaD0TIfLeKf1QgwqtAU KqyBoLctNtdUlSp6nY0ClXnJnbzhx4qyvSQbn/oi4IQ3DVCOI1JfOXrzdIRShO27 71EqYTfxl7BAs/ds4Y+g4RLvsEIc/Q6iZ0dwlUmOeS7nKZk0xwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMPcB04g+ANOxX2Aal54SCE5vD55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTQ2MzE3ZjktNTE4MS0z NWE3LWFiMjAtMDBiYWNmNjhiZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWMgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAiBcv0yRNeSG8IEhUqxJJRSPcjlwzsBatbIdVhK0xcSYloKN5Qg2L9 G6xgOY6+EJfIJaSL64cg07yqSs4gRKMj2NJpnOwKXKdlLs0GZtquXFLMs/lsRZqX DjN+p3JlNp2eoW11tYtl0HDwUF2x6UVI8mHEfVtb16gAeS6Q7/TFjbi9ZxpuRsqM Lun5MWItJH3KRO3R6oInLdbBBZSkDkckEb6Akuh1g+1o5kTtJXPvUaydI0hQ9ioh ddxmpujXxAcxpzEh0U9e0MO8iDPFnsPS+kpiBmjavcVX3jtUmZUlWWRnUwX7B4en s9OqTV4h6zKcCzTxoZ3DvfqFUxB9gVNc -----END CERTIFICATE-----Generated at Tue Sep 16 08:52:49 2025 by rpki-client